$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft File: QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft (raw, json) Hash identifier: tJ+D+jtKxiqCq2AfAjkzyQOZuwmJ5qu1bNyHLTIVzCE= Subject key identifier: FF:92:0A:AB:F5:B1:E1:E9:E3:89:F0:D1:27:89:82:51:B7:0F:B2:7E Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C Certificate issuer: /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Certificate serial: 02F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft Manifest number: 02EC Signing time: Sun 19 May 2024 03:17:01 +0000 Manifest this update: Sun 19 May 2024 03:17:00 +0000 Manifest next update: Sun 26 May 2024 03:17:00 +0000 Files and hashes: 1: QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl (hash: 90eRbEb84uMldGLRyCTZCFEhNxaFcDMqlKg1CxuEXF8=) 2: FFDA736894CB11ECA827746DC4F9AE02.roa (hash: nbCviYG6ZU2PoxH5R9L614zoQP6hvAN/12PgWuwOdEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Validity Not Before: May 19 03:17:00 2024 GMT Not After : May 26 03:17:00 2024 GMT Subject: CN=66496f2d-7c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9b:ab:a7:c4:84:3f:5e:70:bb:bc:d2:7a:15: 18:49:67:2f:b5:fc:fa:dc:75:d8:39:26:c2:d2:f6: f6:8c:33:6f:68:c4:dd:ce:6e:4a:fa:8a:d9:b5:e7: b8:e7:c0:c1:4a:5e:11:a9:43:6b:cc:8f:aa:ce:63: eb:cd:fb:fe:5d:0d:04:6b:41:51:37:e5:f8:b5:62: d2:ce:2c:3e:8f:59:84:d4:e3:2f:58:e0:3b:d5:7f: 04:34:f4:82:1b:c6:ed:18:45:ed:70:e6:1f:e4:20: f7:53:c5:fa:d2:da:24:7c:16:c3:e0:2c:1e:10:f3: 19:20:81:66:36:f4:a6:9e:0b:05:14:d4:42:00:40: 03:6e:ac:9d:36:1e:98:5d:e5:ad:7e:a0:22:86:ab: cc:74:46:3e:bd:07:cd:32:8d:78:75:b2:6b:d7:55: 96:48:d6:b9:8c:e3:51:71:56:3e:e5:49:8b:2a:09: 1f:0b:7d:de:40:f6:80:88:17:2a:39:7d:cf:76:dd: 39:e5:f9:93:51:f3:e1:c4:54:ad:50:c2:50:e1:0d: ea:99:19:b8:8f:5b:3b:dc:b0:c5:7c:94:0d:d6:65: cb:46:2c:ff:14:cc:1b:2e:98:8b:55:89:2f:0f:15: 13:92:f5:b8:95:ee:9b:3c:a8:6a:bb:14:ea:90:41: 52:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:92:0A:AB:F5:B1:E1:E9:E3:89:F0:D1:27:89:82:51:B7:0F:B2:7E X509v3 Authority Key Identifier: keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:68:ed:bd:66:18:3f:27:4f:8b:b6:bf:97:8b:33:a2:25:3f: dc:5f:7c:0c:0e:ca:52:d0:2c:f2:fe:41:c6:21:67:69:8d:e6: 89:f6:40:79:d4:52:7f:d6:bb:a4:f5:e0:6d:d8:50:64:61:67: 59:ca:34:0d:5d:88:9a:a0:3e:61:8e:04:4b:4b:c2:d2:32:13: 8c:f7:1e:64:ec:2b:bb:26:35:bb:ce:55:e9:f3:bc:53:9d:d1: 6a:a1:40:59:9e:15:dc:63:84:ed:cb:1b:22:8f:4b:e3:78:97: 03:ba:4d:cc:9f:7f:90:f9:0a:18:6e:e8:6a:fe:f3:30:3e:e2: a6:ad:b2:0f:e2:34:3e:d4:a7:02:49:60:a5:64:95:a7:f8:62: 40:e1:80:f3:f5:0b:a1:f4:91:9e:15:59:c3:80:8b:7b:93:03: ed:15:4c:08:de:e5:d2:ef:26:9c:43:41:c9:2b:ce:a7:94:fb: b1:c0:1e:36:d3:f5:38:72:06:bd:bd:90:1c:7b:70:0f:19:a5: c7:c2:20:fd:1f:1a:31:71:87:49:fa:1e:83:3c:3c:c1:97:aa: 37:60:76:f9:2c:53:9d:21:7f:cb:f3:e0:e3:3d:bf:fe:d6:f0: ef:40:64:d2:cf:c3:97:9e:da:b9:ca:7b:12:4e:23:f5:58:d5: 58:ff:e9:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM4QzkxMTAvBgNVBAUTKDQxMjNBQzJFQzA2OUQyRUYyNzIwMUY0REJDQUFDNkMx OTEyMTkwMkMwHhcNMjQwNTE5MDMxNzAwWhcNMjQwNTI2MDMxNzAwWjAYMRYwFAYD VQQDEw02NjQ5NmYyZC03YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6purp8SEP15wu7zSehUYSWcvtfz63HXYOSbC0vb2jDNvaMTdzm5K+orZtee4 58DBSl4RqUNrzI+qzmPrzfv+XQ0Ea0FRN+X4tWLSziw+j1mE1OMvWOA71X8ENPSC G8btGEXtcOYf5CD3U8X60tokfBbD4CweEPMZIIFmNvSmngsFFNRCAEADbqydNh6Y XeWtfqAihqvMdEY+vQfNMo14dbJr11WWSNa5jONRcVY+5UmLKgkfC33eQPaAiBcq OX3Pdt055fmTUfPhxFStUMJQ4Q3qmRm4j1s73LDFfJQN1mXLRiz/FMwbLpiLVYkv DxUTkvW4le6bPKhquxTqkEFSAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+SCqv1 seHp44nw0SeJglG3D7J+MB8GA1UdIwQYMBaAFEEjrC7AadLvJyAfTbyqxsGRIZAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzhDOS83MzhEREZDNDk0 QzgxMUVDOTVDQjk3NjVDNEY5QUUwMi9RU09zTHNCcDB1OG5JQjlOdktyR3daRWhr Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTT3NMc0JwMHU4bklCOU52S3JHd1pFaGtDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzhDOS83MzhEREZDNDk0QzgxMUVDOTVDQjk3NjVDNEY5QUUwMi9RU09zTHNCcDB1 OG5JQjlOdktyR3daRWhrQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxaO29Zhg/J0+Ltr+XizOiJT/cX3wMDspS0Czy/kHGIWdpjeaJ9kB5 1FJ/1ruk9eBt2FBkYWdZyjQNXYiaoD5hjgRLS8LSMhOM9x5k7Cu7JjW7zlXp87xT ndFqoUBZnhXcY4Ttyxsij0vjeJcDuk3Mn3+Q+QoYbuhq/vMwPuKmrbIP4jQ+1KcC SWClZJWn+GJA4YDz9Quh9JGeFVnDgIt7kwPtFUwI3uXS7yacQ0HJK86nlPuxwB42 0/U4cga9vZAce3APGaXHwiD9HxoxcYdJ+h6DPDzBl6o3YHb5LFOdIX/L8+DjPb/+ 1vDvQGTSz8OXntq5ynsSTiP1WNVY/+m9 -----END CERTIFICATE-----Generated at Sun May 19 03:48:53 2024 by rpki-client on console-fra.rpki-client.org